2021-07-07

QSAN Storage Manager - Path Traversal

ZUSOART ID

CVE-2021-32516

CVE ID

CVE-2021-32516

Vulnerability Type

CVSS 4.0 Base

7.5

Description

QSAN Storage Manager分享連結功能含有Path Traversal漏洞，攻擊者不須任何權限，透過該功能參數輸入任意系統檔案之路徑，即可下載。

Vendor

QNAP Systems, Inc.

Product